
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json)
Hash identifier: ocvfCkRlHaD7ehXlWQf6Jtf7w/ZFXEWaZuPjo6O4cB8=
Subject key identifier: 44:34:7E:44:D9:55:5C:32:49:6C:44:01:28:FD:EA:02:06:43:3C:05
Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
Manifest number: 0143
Signing time: Tue 27 Oct 2026 05:44:20 +0000
Manifest this update: Tue 27 Oct 2026 05:44:19 +0000
Manifest next update: Tue 03 Nov 2026 05:44:19 +0000
Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: 7MFbLjCGH2U0FEvuus+qAVOaoWD5+rLpKzCLqYHP9Vk=)
2: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: gt4tU/hcyIVMBkjGuvPu9y9CXe1mDoCcezI1psVlwHM=)
3: 47603784536011F180C8B9B49C833773.roa (hash: UiZtfEjCgBUhOSkEu8hjBg9c3hRjlkn0x10nUpaMUS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Validity
Not Before: Oct 27 05:44:19 2026 GMT
Not After : Nov 3 05:44:19 2026 GMT
Subject: CN=6ae03a34-a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:8f:af:9d:e5:ac:24:c7:de:bd:cb:ea:0c:
6c:81:8a:46:13:ab:22:53:d2:a8:2d:e5:98:0e:b7:
5e:d2:e5:1a:ff:25:ba:ed:59:26:d7:fa:5e:fd:c3:
ef:26:1a:aa:ad:04:16:60:01:b1:0e:93:18:47:7e:
65:be:b7:85:b6:cb:62:9a:5e:85:20:be:3c:00:b6:
e6:bd:1c:82:5b:a0:1c:57:40:cf:0d:34:c0:62:57:
03:62:d2:d9:57:d8:6c:56:0b:38:f7:90:83:36:e8:
63:a5:81:53:7c:e7:02:79:e1:7d:fa:c3:1a:21:1e:
41:77:cb:74:fe:9b:e9:49:3c:a8:ea:11:05:59:99:
5f:0c:f7:fe:39:66:bc:47:fa:24:f8:87:93:d8:a7:
bc:b4:f6:80:5a:77:a6:0e:4c:e9:2e:96:4b:94:60:
bd:9b:e7:c4:1c:19:d7:54:f4:77:f5:aa:78:9c:bd:
35:10:07:d5:79:a0:0f:63:2b:cc:b2:a7:9b:5d:30:
9e:ca:dc:33:83:11:a1:46:8d:c1:af:66:d7:12:84:
fa:c3:45:a8:77:3f:9b:22:8b:af:02:36:e1:9b:c9:
f9:75:da:d7:d7:fa:90:0e:78:da:d1:31:18:d6:fa:
ec:f6:5c:7d:96:f1:5a:ce:a7:6d:79:16:b8:e7:2a:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:34:7E:44:D9:55:5C:32:49:6C:44:01:28:FD:EA:02:06:43:3C:05
X509v3 Authority Key Identifier:
keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2c:9e:1b:2e:cd:3a:1b:9c:df:92:45:d6:91:07:62:7e:62:
dd:4a:da:c2:a2:9e:ce:eb:82:13:20:2d:c2:da:c6:5d:a8:87:
95:75:e6:63:95:a4:38:ca:a9:19:1b:b9:4e:95:86:3f:c0:b9:
d2:aa:bd:91:b5:79:81:c2:5d:69:6a:eb:f2:b6:15:06:ea:5c:
b1:7c:32:a7:32:85:8c:0d:46:90:3d:3b:51:39:19:97:65:49:
cb:47:01:51:5d:f8:51:d2:0b:f0:99:6e:46:60:61:86:de:0d:
81:8a:8d:7c:a8:6f:cf:69:77:b1:fc:68:da:84:dd:1f:30:a7:
ba:9e:be:0b:c1:3d:86:1b:be:1c:4b:94:82:74:db:3f:9b:58:
df:df:d1:e5:1f:f5:40:f4:ca:d4:ad:9d:c4:f8:88:b2:66:5b:
c8:7c:79:69:3f:42:dc:46:79:dc:50:a3:65:e1:50:bb:8f:b6:
30:e2:67:f5:69:90:93:30:92:eb:f6:ea:bc:73:fb:d8:de:31:
95:30:da:71:1d:66:d3:ab:3b:03:b1:ff:23:0d:e8:f8:95:af:
0b:c5:4d:1a:66:d4:8d:b6:50:1d:29:08:5d:d6:77:f1:98:4e:
9b:bd:04:60:4d:ac:51:bc:f5:2b:1d:4b:8c:0b:0a:24:dd:58:
70:9d:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:26:06 2026 by rpki-client